Gentoo Security Advisory GLSA 200610-05 (capi4hylafax)

The remote host is missing updates announced in advisory GLSA 200610-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : capi4hylafax (ZYPP Patch Number 2378)

By using shell meta characters in the sender number remote attackers could execute arbitrary commands. CVE-2006-3126 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE 10 Security Update : capi4hylafax (capi4hylafax-2366)

By using shell meta characters in the sender number remote attackers could execute arbitrary commands CVE-2006-3126. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update capi4hylafax-2366. The text...

Debian DSA-1165-1 : capi4hylafax - missing input sanitising

Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...

[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...